$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa File: f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa (raw, json) Hash identifier: iZnEVV0JuBZ0NU3fElCdmcWFCQwD8pUcYl1rgPXllnk= Subject key identifier: D9:BD:F9:36:E0:64:AA:19:66:26:F6:BA:0C:CD:1D:30:DE:47:2A:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2B3699F866CDB3A599B780EA5D6AF8B9237EADEE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa Signing time: Tue 05 Aug 2025 18:30:23 +0000 ROA not before: Tue 05 Aug 2025 18:30:23 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:36:99:f8:66:cd:b3:a5:99:b7:80:ea:5d:6a:f8:b9:23:7e:ad:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:30:23 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=90fffa77b41e5318f1e5f47f771fb0e3da59e21a7e7b68b8f31ea10d558b4a4f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:ec:ff:1e:42:a6:1a:c8:78:1a:9b:03:bc: fa:7e:38:90:63:07:df:5d:c4:41:53:9a:4c:2a:61: 2e:a8:39:ef:9b:5f:19:81:29:64:75:5e:c6:f2:19: 64:de:88:6c:84:ed:cc:2a:15:18:b7:a5:7a:50:c8: dc:09:d5:b5:fe:51:00:23:e5:a1:d7:7a:09:a6:a5: a6:59:95:d1:11:ad:e6:59:02:a2:ba:38:c5:48:2d: d4:40:ac:fb:52:e3:29:28:85:37:ea:2e:6f:c9:cb: fc:82:ed:6d:3a:6b:61:21:4f:e9:fc:4f:c5:a6:96: 49:b3:f9:fa:ce:f0:d0:07:71:68:34:03:6a:f1:4d: dc:66:cf:b3:05:05:3f:7c:7b:a4:6e:b4:76:96:9a: d9:29:4e:a6:3a:59:98:60:e1:67:49:b8:53:f7:d1: 9d:67:d8:1b:5a:f8:85:8f:7d:b4:09:45:3b:c8:11: 07:42:15:24:cc:91:b6:e3:6c:30:c7:b2:a7:c6:8b: 25:f1:28:b7:2e:2d:48:7c:ad:c9:7c:94:1c:40:d2: 6c:ea:e0:6c:9a:fe:e5:5c:af:4c:a8:0b:dc:9e:3d: 5e:82:3b:32:8f:e7:49:92:85:67:e2:61:de:16:f7: ef:10:93:c0:a0:ee:aa:49:fe:f3:ad:2c:fc:f0:0b: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BD:F9:36:E0:64:AA:19:66:26:F6:BA:0C:CD:1D:30:DE:47:2A:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d1727a-eb2f-4ae0-881e-c8fdc344b95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/42 Signature Algorithm: sha256WithRSAEncryption 97:78:d9:dd:82:f2:d5:e2:6c:38:be:7b:f2:51:c4:63:9b:68: fd:f6:a6:1f:7c:f1:4f:0f:31:fc:ec:ef:2d:50:f4:9a:f7:b2: 11:4b:66:3a:be:c7:06:31:24:f8:cc:6c:f3:a2:a0:a7:7a:08: 2f:92:25:57:be:fa:bd:20:cd:05:72:90:1a:02:03:5f:47:ca: b0:bd:c4:11:20:64:6c:0e:4b:6b:86:c2:0a:4b:a7:b4:e2:8c: af:6d:22:a7:2e:47:d2:8e:a2:19:85:94:d5:d9:f2:e1:c9:77: 1d:30:b3:0b:6e:c7:c0:06:2b:78:31:06:2f:31:06:cf:74:6a: cf:f1:94:b5:c2:45:79:a0:7e:da:02:e9:37:fb:7f:d7:2d:c0: ae:63:16:30:79:93:65:db:e7:93:fc:c2:4f:7d:8d:b5:fd:c8: a5:d8:7a:e1:e3:45:aa:c5:a4:e2:0e:0c:c2:6e:a6:e8:9a:3b: f2:16:2b:31:a4:4a:26:af:c3:75:d1:54:ac:f6:5c:9d:2c:0d: 1a:3f:c6:68:cb:24:41:da:3f:52:78:40:86:8b:be:69:cb:27: 9e:6b:40:c5:ed:1a:3a:c9:de:c7:6a:64:db:62:13:55:ee:06: f2:6a:26:71:d5:7a:b2:f1:1e:46:99:ba:70:2a:04:51:e5:63: 87:2f:d9:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKzaZ+GbNs6WZt4DqXWr4uSN+re4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMDIzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGZmZmE3N2I0MWU1MzE4ZjFlNWY0N2Y3NzFmYjBlM2Rh NTllMjFhN2U3YjY4YjhmMzFlYTEwZDU1OGI0YTRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6S+z/HkKmGsh4GpsDvPp+OJBjB99dxEFTmkwqYS6oOe+b XxmBKWR1XsbyGWTeiGyE7cwqFRi3pXpQyNwJ1bX+UQAj5aHXegmmpaZZldERreZZ AqK6OMVILdRArPtS4ykohTfqLm/Jy/yC7W06a2EhT+n8T8Wmlkmz+frO8NAHcWg0 A2rxTdxmz7MFBT98e6RutHaWmtkpTqY6WZhg4WdJuFP30Z1n2Bta+IWPfbQJRTvI EQdCFSTMkbbjbDDHsqfGiyXxKLcuLUh8rcl8lBxA0mzq4Gya/uVcr0yoC9yePV6C OzKP50mShWfiYd4W9+8Qk8Cg7qpJ/vOtLPzwCzSDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2b35NuBkqhlmJva6DM0dMN5HKvswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1ZDE3MjdhLWViMmYtNGFlMC04ODFlLWM4ZmRjMzQ0Yjk1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74AAwDQYJKoZIhvcNAQELBQADggEBAJd42d2C8tXibDi+e/JRxGOb aP32ph988U8PMfzs7y1Q9Jr3shFLZjq+xwYxJPjMbPOioKd6CC+SJVe++r0gzQVy kBoCA19HyrC9xBEgZGwOS2uGwgpLp7TijK9tIqcuR9KOohmFlNXZ8uHJdx0wswtu x8AGK3gxBi8xBs90as/xlLXCRXmgftoC6Tf7f9ctwK5jFjB5k2Xb55P8wk99jbX9 yKXYeuHjRarFpOIODMJupuiaO/IWKzGkSiavw3XRVKz2XJ0sDRo/xmjLJEHaP1J4 QIaLvmnLJ55rQMXtGjrJ3sdqZNtiE1XuBvJqJnHVerLxHkaZunAqBFHlY4cv2fE= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:03 2025 by rpki-client